> I'd much rather they create some sort of P2P arrangement like Bittorrent, but with no trackers required.
Sounds like Syncthing. That's what I use for file-sharing. It's peer to peer, doesn't require trackers, and is relatively easy to use. The only problem is that the setup is more involved than just sending a link and you have a long-term link between the people you have a shared directory with. It's not meant for one-off usage, though I guess you could use onionshare for the latter use-case.
Probably best to use OnionShare.
It lets you share files directly with the person you want to give the file to, but routes everything over Tor.
It has a clearly visible log in the UI so you can figure out if someone accessed the file already.
It's free, opensource, created by the Tor Project.
>After a ridiculously long sixteen months (or roughly ten years in pandemic time) I'm excited to announce that OnionShare 2.3 is out! Download it from onionshare.org.
>
>This version includes loads of new and exciting features which you can read about in much more detail on the brand new OnionShare documentation website, docs.onionshare.org. For now though I'm just going to go over the major ones: tabs, anonymous chat, and better command line support.
u/MicahFLee is a treasure, and a great guy besides. CHERISH HIM!! ;)
He's updated OnionShare. Check it out! :)
https://zmnscpxj.github.io/bitcoin/bitcoin.pdf as well.
It is fairly easy, if you are running a Linux or BSD somewhere, to install Apache or nginx locally, plus install Tor locally, and create a Tor hidden service as well and point it at your webserver, then host bitcoin.pdf even without having a static IP address or having to deal with NAT.
You can also try something like onionshare: http://lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion/ or https://onionshare.org/ (clearnet) though I must confess I only discovered this from a short search and have not actually tried it.
Finally, we can also create a BitTorrent containing bitcoin.pdf as well.
I choose Session because it adds an additional layer of security/privacy, and that's anonymity (onion network).
Also consider these as their products mature:
The best way would be even physical separation with Hard- and Software Diversity.
This is done, so that if your Server gets pwned, it cannot leak its public IP address.
What would be your threat model?
Also: If you are new and your site is only static, you might want to take a look at onionshare. As one can misconfigure a server thus leading to deanonymization.
If you only need to send files directly to another user (without uploading to a server) I'd recommend FilePizza, which is fast, easy, and can handle files as big as your browser can handle. While it does encrypt your files, if you need extra privacy and anonymity, try OnionShare, which is capable of sending files of unlimited size over Tor, which does have the caveat of it being slower than the direct WebRTC connection that FilePizza uses.
Perhaps you're looking for something like OnionShare? I think that might be as close as you're going to get to what you're asking about.
If you're really concerned about the transfer being secret, you could encrypt the OnionShare link with an agreed-upon password before sending it.
Other than securedrop there are:
https://www.globaleaks.org/ (You host, she uploads, easier install than securedrop)
https://onionshare.org/ (She hosts, you download)
https://ricochet.im/ (To coordinate)
This post is not an endorsement to any of them.
torrenting can open hundreds of connections for a single download on the open internet, using an ephemeral socket for each one. This would be multiplied by a factor of six (hand-waving a bit here) over Tor - that's more a problem of connection saturation than raw bandwidth. Up/downloading large files can be fine if you don't need high speeds or low latency.
Check out onionshare.org too, a well established project for file sharing over Tor (I'm sure the name garlicshare was meant to be a reference).
For text-based message, you can try still ingenious tool, StegCloak that encrypt messages in invisible characters using steganography with AES-256-CTR. For file-based, you can try OnionShare
Tails is basically running everything over TOR.
To torrent you might need to set it up with persistence and then install a torrent client. The list of software shipped with Tails tells how to add additional software.
Onion Share is available for file sharing.
Here is a good discussion of torrenting with tails
Get rid of the third party server. Use OnionShare instead, then your peer can download the file directly from your computer that's hosting it as an onion service. Make sure to share the file download URL over anonymous messaging app like Briar or Ricochet.
A VPN can be traced back for example it is probably a paid VPN and you left payment information behind (and yes Bitcoin also isn't anonymous and if you mix it it can still be traced back to the orginal address) and how do you know they don't keep logs? And yes Tor makes it harder(because the relays you use need to make a timing attack which isn't completly easy) but if you use Tor then why not directly use OnionShare? Especially because it uses a .onion domain. (which not even the exit node knows you've visited)
Create an .html file. Once you're ready to publish, drag/drop the .html file in the 'website' section of onionshare. Thats the easiest way. In settings look for persistent address and you good to go. https://onionshare.org/
Have you considered running a Tor onion site, so Viacom will have no idea where it's hosted? They're relative easy to set up, though you'd have to run a (basic) Web server.
Heck, if you use OnionShare, it's all done for you.
The downside is that it can only be accessed using Tor Browser, not regular browsers (which don't grok .onion domains).
Other than what was stated, you can maybe use OnionShare for you to share something anonymously, though the recipient also needs to use either OnionShare or Tor Browser to download what you intended to share.
The latest version of onion share supports running a full onion site. SUPER simple way to get it done.
Install onion share. Put files in folder that O-S is sharing. Click Share. Give out link provided.
If you want to get more serious about it, there's a guide linked in the right hand column under "HOSTING"
​
Minor Correction.. it's OPSEC (Operational Security)
You could use Onionshare. Basically you drag and drop your files into the OnionShare and click the button to share. Onion link will be generated and you can provide the link to anyone you want to share it with.
https://onionshare.org/
I have had a similar problem in the past. I made an account outside of China and set the App Store to one based in Europe. I asked them to sign into it using the credentials i made them and they were able to successfully download and install proton vpn and other apps they weren’t able to get in mainland China.
Made them a proton mail account as well. I seem to remember in an older version of iTunes when you sync your phone to the software i was able to backup specific versions of the apps to a hard drive or usb.
If they have a computer i could suggest sending them an encrypted usb with some software on it. I’m waiting on a USB in the post so i can copy a bunch of software to send to them including proton vpn for mac and windows and tor browser because they’re having problems accessing the https://torproject.org although once they have tor browser successfully installed they could also install onionshare (https://onionshare.org) which would allow you to send them encrypted files end-2-end.
So in theory they could install tor browser and onionshare to receive a .ipa file.
It doesn't seem very secure. And it relies on a static server. Unless speed of transfer is crucial I would recommend: https://onionshare.org/
​
You can also just set up a VPN with something pretty light like Wireguard and do so such that peers can only share files via samba or something.
It's not ideal for photo sharing - only filesharing. But using an onion is the only way to do such things safely.
​
Give the Tor people a slap for not releasing a complete onion server any mortal can bring online.
One of my favorites is Ricochet (though I'll now use Cwtch instead) along with RetroShare for sharing files and the one you are sharing with have to use Tor browser to download files.
Ricochet (though needs updated version of Tor) and say you want to share something then OnionShare is what you need.
For non cloud solution, if you want to share something for someone anonymously, you can use OnionShare. Though it's based on Tor, meaning the URL will be gibberish ending with dot onion. So for other people to download it, they have to use Tor browser.
I'd suggest onionshare rather than running an essentially unprotected file server on tor.
My intent was just to point out that tor isn't a network designed to carry the bandwidth used by file sharing.
Check out OnionShare. It sounds like it could be useful to you.
The computer uploading the files will need to be running and online at the same time as you're downloading it from Tails, so if you only have one machine available to you, this will not work.
You might find OnionShare useful. It hosts the file from your own laptop/desktop rather than a server.
The person receiving the file needs to use Tor Browser to access it.
Consider abandoning torrents despite their efficiency and just host it on an onion server. You can do that from home with safety and little or no expense.
Assume long term costs are the issue here? Use an old laptop to keep power use down.
Onions excel at small scale (human scale) projects like this.
A good way to test onions on a small scale: https://onionshare.org/
It's worth mentioning really neat Apps that use the Tor network for specialized purposes. Micah Lee – @MichahfLee, and his blog – wrote a nifty program called OnionShare, an open source tool that lets you securely and anonymously share a file of any size.
Are there any other specialized tools that use the Tor protocol to do neat things?
We had a webdav server running here for many years for remote access, but I would never do that today.
There are two problems.....
Running a safe exposed server is dangerous today. Your server will be under constant probe and attack. Don't kid yourself that any mitigations are really that good.
Second problem is speed. You'd be surprised just how limited your transfer speeds are given the real internet.
IMO, the ONLY safe way to serve files these days is via an onion server with the security cookie function active:
https://www.void.gr/kargig/blog/2015/04/10/onion-service-authorization-cookie/
A really difficult web address, no firewall pinholes, and pretty absolute protection via that security cookie.
A good, EASY, smaller scale version of this is here: https://onionshare.org/
So easy - it's addictive.
I'm pretty sure that's a no within Ricochet itself.
Depending on your threat model, you might want to check out Onionshare or Cryptocat, which currently allows for file transfers up to 200MB.
I looked in the gpedit, but it seems there's only one option to disable it entirely, and not configure it to defer other programs and apps from using it
It should let you select which folders to sync to OneDrive in the settings I think. I've never had any apps or programs use the OneDrive, but that's probably since I never had one or linked it with any account.
Maybe try a different file cloud hosting service? I use Dropbox - not very secure, and not much space, but fast and quick.
Onionshare is neat too, and anonymous for privacy. Haven't tried it yet though, but it doesn't have any file limits it seems.
Wow that'd be great! Also, I think using Mega isn't safe anymore. I came across an article about Kim DotCom saying so, and isn't he the founder of Mega too? I assume he has intimate knowledge of Mega too. I suggest Onionshare though, I think it's really safe. AFAIK one can upload any files of any size but users can only access the .onion link generated after upload via Tor Browser - AFAIK too.